fix: audit remediation — SSE user scoping, FK transactional safety, UI error handling

- H4: scoped SSE import progress to exact userId match; non-HTTP events excluded from all subscribers
- H2: moved PRAGMA foreign_key_check inside SQLite transaction before COMMIT; violations rollback preserving old tables
- M1: removed dead axios-style error branch from extractErrorMessage (interceptor already unwraps)
- M2: split handleSave try/catch — save errors vs reload errors shown distinctly
- M3: added provider field validation before AI config test request
- Added SSE scoping regression tests (import service + controller)
- Added FK check failure rollback test (database-migrations.spec)
- Updated controller spec expectations for userId parameter

Co-authored-by: Code Review <branch-review>

apps/admin/src/pages/Teachers/index.tsx

@@ -28,8 +28,12 @@ interface ProfileFormValues {
 }
 
 const ROLE_LABELS: Record<string, string> = {
-  super_admin: '超管',
-  teacher: '老师',
+  super_admin: '超级管理员',
+  teacher: '任课老师',
+  academic: '教务管理员',
+  accommodation_operations: '住宿运营管理员',
+  classroom_operations: '教室运营管理员',
+  system_admin: '系统管理员',
   class_teacher: '班主任',
   dormitory_supervisor: '宿管',
   institution_head: '机构负责人',